Résumé
n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
Références
Vulnérabilités liées
Tout Supply chain →- HIGHGHSA-QQF5-X7MJ-V43P
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
- HIGHGHSA-2MFG-CC43-9PCJ
LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector
- MEDIUMGHSA-C37G-W77Q-M4VP
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
- MEDIUMGHSA-Q59X-JC9F-GFQF
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
- MEDIUMGHSA-5739-39V2-5754
PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle
- HIGHGHSA-JC38-X7X8-2XC8
PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks